$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft (raw, json) Hash identifier: cDEx764q+Rpn5ip/yj3A0DPBbuelDymi+BjND3MhUss= Subject key identifier: CA:5A:F1:03:A7:7D:CA:E7:ED:E8:8B:1B:26:AA:13:E7:19:26:08:C0 Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Certificate serial: 4F5EF02AE730F706493CA53015B3DE498628843D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft Manifest number: 01CA Signing time: Fri 04 Apr 2025 09:11:14 +0000 Manifest this update: Fri 04 Apr 2025 09:06:14 +0000 Manifest next update: Mon 07 Apr 2025 09:15:14 +0000 Files and hashes: 1: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: VhmM6dwj6jhcWpHKGkB8nHv6O88nIuiPwR83QLa+WS8=) 2: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: mN0twBIDnpakC8HUHafkf1WXSP1Z0ySHIU0xGnkB28I=) 3: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl (hash: jmIkC/r34L5XHJmOmmgZ57Oz4r2fRqzoL1NKSC5eELk=) 4: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VeN/bGOYLWRy+rz86CsEUNPZS6zxON2N9UHaLIP5nig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 09:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:5e:f0:2a:e7:30:f7:06:49:3c:a5:30:15:b3:de:49:86:28:84:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Validity Not Before: Apr 4 09:06:14 2025 GMT Not After : Apr 7 09:15:14 2025 GMT Subject: CN=CA5AF103A77DCAE7EDE88B1B26AA13E7192608C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:56:19:ae:11:c4:78:f3:35:cd:9b:a6:2e:c8: 12:5e:13:62:0f:25:af:3a:3f:70:4e:a8:2a:ac:fb: e1:f7:97:a7:31:95:85:95:8b:92:42:ca:dc:b9:48: 01:d7:bb:5d:94:0d:dd:8d:92:93:12:24:ef:6d:0d: e0:88:e4:5f:37:f4:5c:5b:67:2e:b3:85:2c:57:a4: ef:15:c1:ed:f6:31:45:3f:9a:6b:b3:35:8a:61:18: b5:ea:5d:16:26:f6:f0:5f:31:b3:3f:79:17:67:cb: ad:0d:c1:f2:42:5f:39:be:2b:ce:19:3b:1b:a0:09: ea:f2:85:1e:9e:b3:35:04:63:37:74:f2:ad:72:21: 51:36:38:ba:0a:bd:75:39:22:49:58:1c:5f:3f:74: 91:f4:60:8a:ef:40:94:e9:cb:c7:9a:c6:c3:ea:f0: 36:e5:35:f3:31:95:d4:f2:fb:12:c8:8d:4d:44:0d: 9e:0c:e5:e5:06:09:1e:99:00:a6:23:58:6e:ed:24: e4:e7:10:be:00:a7:25:90:06:9c:98:78:1d:71:1c: 28:d2:22:f3:66:6e:df:dd:a0:14:ad:d6:75:54:ac: 8f:14:cf:46:c8:1b:a5:5c:19:17:1c:6a:6b:a9:fe: 21:04:b1:b0:a9:97:43:ab:9b:41:b2:60:c2:eb:b0: 0b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5A:F1:03:A7:7D:CA:E7:ED:E8:8B:1B:26:AA:13:E7:19:26:08:C0 X509v3 Authority Key Identifier: keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:20:38:32:40:a5:10:36:d4:84:95:a9:9c:ad:ce:56:8f:d1: b2:06:c4:71:0a:78:89:1a:fc:51:aa:b2:05:c0:0a:9b:a0:25: 16:73:7a:b8:14:10:62:13:6c:9d:86:ca:bb:42:ba:ed:c6:84: 0c:71:82:46:32:ad:3d:fd:2e:30:dc:a6:ff:2a:ea:00:46:7b: e5:87:29:97:67:4a:14:92:8f:20:ec:f1:5c:2b:03:8c:0d:1f: c2:47:3e:bd:50:b4:78:33:09:73:f7:c5:e6:81:99:9c:15:bc: 2d:ab:39:62:47:87:e1:5a:0d:2e:e2:51:33:5f:9c:17:22:3b: 34:53:66:00:2b:16:c2:10:26:41:c1:fb:b5:5d:02:96:7f:4b: 11:b5:ac:27:1f:d6:d0:4b:02:68:71:f8:75:3a:ac:0e:75:b9: de:3f:74:c4:d0:9a:73:c1:26:32:ef:96:a3:e7:7b:e4:73:c8: 9c:38:51:32:39:0b:a1:27:07:6c:8b:f0:2f:f8:70:39:23:a5: 2f:a3:d3:3a:f4:9d:d4:f6:ab:39:2f:fa:af:9f:86:58:da:1a: c2:8f:13:b2:f0:f6:fd:25:3a:63:2e:4b:48:ea:99:22:86:21: 09:a6:67:1e:f7:55:3e:7a:97:66:a3:81:13:8e:fb:ec:19:2e: 71:8a:7a:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT17wKucw9wZJPKUwFbPeSYYohD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1 REFFRTQyOTAeFw0yNTA0MDQwOTA2MTRaFw0yNTA0MDcwOTE1MTRaMDMxMTAvBgNV BAMTKENBNUFGMTAzQTc3RENBRTdFREU4OEIxQjI2QUExM0U3MTkyNjA4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQVhmuEcR48zXNm6YuyBJeE2IP Ja86P3BOqCqs++H3l6cxlYWVi5JCyty5SAHXu12UDd2NkpMSJO9tDeCI5F839Fxb Zy6zhSxXpO8Vwe32MUU/mmuzNYphGLXqXRYm9vBfMbM/eRdny60NwfJCXzm+K84Z OxugCeryhR6eszUEYzd08q1yIVE2OLoKvXU5IklYHF8/dJH0YIrvQJTpy8eaxsPq 8DblNfMxldTy+xLIjU1EDZ4M5eUGCR6ZAKYjWG7tJOTnEL4ApyWQBpyYeB1xHCjS IvNmbt/doBSt1nVUrI8Uz0bIG6VcGRccamup/iEEsbCpl0Orm0GyYMLrsAuXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUylrxA6d9yuft6IsbJqoT5xkmCMAwHwYDVR0j BBgwFoAUaZRcOGmz5CnUsK7O35mZ6l2u5CkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMC82OTk0NUMzODY5 QjNFNDI5RDRCMEFFQ0VERjk5OTlFQTVEQUVFNDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1REFF RTQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5 RUE1REFFRTQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANwgODJApRA21ISVqZytzlaP0bIGxHEKeIka /FGqsgXACpugJRZzergUEGITbJ2GyrtCuu3GhAxxgkYyrT39LjDcpv8q6gBGe+WH KZdnShSSjyDs8VwrA4wNH8JHPr1QtHgzCXP3xeaBmZwVvC2rOWJHh+FaDS7iUTNf nBciOzRTZgArFsIQJkHB+7VdApZ/SxG1rCcf1tBLAmhx+HU6rA51ud4/dMTQmnPB JjLvlqPne+RzyJw4UTI5C6EnB2yL8C/4cDkjpS+j0zr0ndT2qzkv+q+fhljaGsKP E7Lw9v0lOmMuS0jqmSKGIQmmZx73VT56l2ajgROO++wZLnGKeo4= -----END CERTIFICATE-----Generated at Sat Apr 5 16:04:11 2025 by rpki-client